$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/40cec1df-04b7-35b3-8345-c6a28a25b333.roa File: 40cec1df-04b7-35b3-8345-c6a28a25b333.roa (raw, json) Hash identifier: E7ZpcY/JsBQHYMGnebA1qyydXnuPeJ5rGTMa7qvnRB8= Subject key identifier: DB:10:07:9E:01:82:21:DD:12:A9:A5:E4:B0:01:BC:87:2C:B7:10:B7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB1B12F615B4E0D7384D9FF80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/40cec1df-04b7-35b3-8345-c6a28a25b333.roa Signing time: Thu 30 Oct 2025 14:02:47 +0000 ROA not before: Thu 30 Oct 2025 14:02:47 +0000 ROA not after: Wed 28 Jan 2026 15:02:47 +0000 asID: 397373 IP address blocks: 172.94.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:b1:2f:61:5b:4e:0d:73:84:d9:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 30 14:02:47 2025 GMT Not After : Jan 28 15:02:47 2026 GMT Subject: CN=621f0e1a-d395-4e54-a761-eb8852d1ac70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:0e:47:6e:7e:bb:ee:9d:ee:ed:2a:0b:3a: 15:8f:21:f2:fc:23:aa:1d:40:04:8c:ac:de:c4:1f: 55:d7:47:7a:56:1d:71:04:f9:65:c8:e9:83:ef:f1: 8b:33:83:f9:c9:10:52:a4:3a:1b:73:25:4c:8b:ec: 5d:6b:0f:04:45:07:c1:ac:81:17:3f:d5:68:95:09: 84:ff:72:cc:62:5e:92:58:58:c2:52:f7:52:d2:a8: 23:bf:20:f2:91:e9:26:33:1b:f7:1d:2e:5c:b7:a9: b0:06:51:75:db:a6:89:99:f0:dc:40:1c:ac:72:d3: 2b:e7:68:21:d1:e7:bd:48:b2:e8:d8:44:3f:aa:0b: d4:aa:05:6c:12:17:0b:3e:0c:40:d6:d6:5b:2c:86: d4:bd:de:16:61:c9:57:5f:e8:2a:76:3d:d7:38:f3: 98:3e:7b:93:7f:78:b4:9c:4a:d2:49:c3:6c:9d:62: cd:f7:18:e2:9d:44:92:85:21:41:73:62:78:c2:73: 0b:98:4f:f2:80:3c:56:ee:74:be:5d:e8:4c:07:fb: a7:67:8e:58:00:79:f2:e1:b1:a3:d9:f8:91:52:b7: 16:1c:7b:df:ad:21:13:67:38:0a:c8:d8:a5:ed:b9: 4d:aa:a2:cd:b0:f7:d6:4d:2d:cf:60:10:1a:9b:d4: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:10:07:9E:01:82:21:DD:12:A9:A5:E4:B0:01:BC:87:2C:B7:10:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/40cec1df-04b7-35b3-8345-c6a28a25b333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fb:fa:28:e0:3d:26:35:8b:7b:7e:b9:75:fe:a4:8d:23:a8: 24:32:5d:73:0b:4e:cd:7e:c4:59:63:ca:1b:8a:d4:eb:6e:18: a8:23:43:af:f7:9b:5a:1c:dc:86:2c:7b:51:34:f1:89:93:fe: bc:77:1d:b8:4f:2b:ba:1e:fb:86:ad:c9:3c:24:2c:f4:b9:68: aa:53:46:7c:0a:ce:12:9c:bc:fc:99:85:cd:fa:f4:e6:d8:7a: e5:1a:39:a6:58:6d:e5:b5:2e:48:71:88:80:e7:23:87:50:7d: 61:2e:e1:a5:53:51:59:c6:df:9c:72:74:6b:70:72:7f:1a:ba: 6c:40:87:c8:26:93:28:59:de:7b:13:00:c2:19:5c:82:be:76: 3b:bf:6c:65:a0:0d:70:16:f4:59:40:cf:86:4f:7c:bf:86:c9: 2c:ad:1e:94:ba:44:c1:e9:00:e8:ff:45:bf:91:e4:9a:f0:57: b7:f9:8e:e1:b4:db:76:22:d8:b9:e3:99:3a:8b:0b:d2:9a:71: 1e:86:d9:6b:05:5b:f4:8f:39:d2:ab:1c:26:09:f9:b8:7a:56: db:94:06:52:c8:c2:7d:50:97:d3:74:5c:0a:17:47:27:ce:b2: ee:2e:09:d7:f7:ec:1c:bb:61:59:8b:6c:14:a6:a4:66:45:67: fa:37:ba:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxsS9hW04Nc4TZ/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMDE0MDI0N1oXDTI2MDEyODE1MDI0N1owLzEtMCsGA1UEAxMk NjIxZjBlMWEtZDM5NS00ZTU0LWE3NjEtZWI4ODUyZDFhYzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGAOR25+u+6d7u0qCzoVjyHy/COqHUAEjKze xB9V10d6Vh1xBPllyOmD7/GLM4P5yRBSpDobcyVMi+xdaw8ERQfBrIEXP9VolQmE /3LMYl6SWFjCUvdS0qgjvyDykekmMxv3HS5ct6mwBlF126aJmfDcQBysctMr52gh 0ee9SLLo2EQ/qgvUqgVsEhcLPgxA1tZbLIbUvd4WYclXX+gqdj3XOPOYPnuTf3i0 nErSScNsnWLN9xjinUSShSFBc2J4wnMLmE/ygDxW7nS+XehMB/unZ45YAHny4bGj 2fiRUrcWHHvfrSETZzgKyNil7blNqqLNsPfWTS3PYBAam9QhbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsQB54BgiHdEqml5LABvIcstxC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDBjZWMxZGYtMDRiNy0z NWIzLTgzNDUtYzZhMjhhMjViMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF37+ijgPSY1i3t+uXX+pI0jqCQyXXMLTs1+xFljyhuK1OtuGKgjQ6/3 m1oc3IYse1E08YmT/rx3HbhPK7oe+4atyTwkLPS5aKpTRnwKzhKcvPyZhc369ObY euUaOaZYbeW1LkhxiIDnI4dQfWEu4aVTUVnG35xydGtwcn8aumxAh8gmkyhZ3nsT AMIZXIK+dju/bGWgDXAW9FlAz4ZPfL+GySytHpS6RMHpAOj/Rb+R5JrwV7f5juG0 23Yi2LnjmTqLC9KacR6G2WsFW/SPOdKrHCYJ+bh6VtuUBlLIwn1Ql9N0XAoXRyfO su4uCdf37By7YVmLbBSmpGZFZ/o3ulQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:05:39 2025 by rpki-client